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BACKGROUND OF THE INVENTION 
FIELD OF THE INVENTION 
The present invention relates to telecommunications systems and, 
5 particularly, to an improved H.323 system. 

DESCRIPTION OF THE RELATED ART 
The International Telecommunications Union (ITU) Recommendation 
H.323 describes a set of devices and protocols for multimedia communication 

10 over packet-switched networks. The four main components defined by the 
specification are clients (also referred to as terminals), multipoint control units 
(MCU), gateways, and gatekeepers. Clients and gateways are generally referred 
to as endoints. The H.323 components are organized into administrative 
domains called "zones." Typically, each zone is managed by a gatekeeper. 

15 Direct extension dialing for internal calls may be provided within each 

zone, i.e., by the gatekeeper. Thus, for example, users within a single company 
may need only to dial two or three digits to call other users within the company. 
However, it is frequently the case that users from more than one company may 
be served in a particular zone. In this case, each company would like to 

2 0 communicate within the company as if that company owned their network, and 
each company would like to take advantage of direct extension dialing, i.e., a 
"virtual private network." Unfortunately, under present H.323 systems, a 
gatekeeper can support only one numbering plan for a single zone. 
Consequently, there is no way for the individual companies to manage an 

25 individual extension-based dialing plan when a common gatekeeper is used to 
manage the single zone serving users from multiple companies; instead, internal 
calls must be placed using the full phone number. One alternative is to use a 
separate gatekeeper for each company, but this multiple gatekeeper alternative 
adds hardware and maintenance costs. 
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SUMMARY OF THE INVENTION 
These disadvantages in the prior art are overcome in large part by a 



system and method according to the present invention. In particular, H.323 
endpoints according to the present invention are provided with a control layer 
which provides a communication domain identification (GDI) assigned to a user 
during call setup or other situations in which it is desirable to have domain- 
restricted functionality. In the call setup embodiment, the GDI may be used 
during the address resolution phase of the H.323 direct signaling mode. In 
particular, the GDI Is used to determine whether the- call is to a user at another 
extension of the same company. In the direct signaling mode, the 
communication domain identification control layer accesses a local database to 
make this determination. Similarly, the GDI may be provided during call setup in 
gatekeeper routed signaling. In this case, a communication domain identification 
control layer provides the GDI to the gatekeeper. The gatekeeper then performs 
the address resolution using the GDI to determine whether the call is to a user of 
another extension of the same company. Of course, the called and calling 
parties may be in domains managed by different gatekeepers. 

Once the GDI has been set up for a particular domain or subdomain, the 
GDI may be used for other forms of restriction checking, as well. For example, 
the GDI may be used for capability searching within the subdomain or subgroup. 
In such a case, particular supplemental services may be allowed only for some 
(or all) phones within a particular domain. 

A better understanding of the invention is obtained when the following 
detailed description is considered in conjunction with the following drawings. 

BRIEF DESGRIPTION OF THE DRAWINGS 
FIG. 1 is a diagram illustrating an H.323 system according to an 

embodiment of the invention; 

FIG. 2 illustrates an H.323 terminal with a communication domain 

identification layer according to an embodiment of the invention; 

FIG. 3 illustrates a gatekeeper according to an embodiment of the 

invention; 

FIGS. 4A & 4B are diagrams illustrating signaling flow according to an 
embodiment of the invention; 



FIG. 5 is a flowchart illustrating system operation according to an 
embodinnent of the invention; 

FIG. 6 is a diagrann illustrating signaling flow according to another 
ennbodiment of the invention; and 

FIG. 7 is a flowchart illustrating system operation according to an 
embodiment of the invention. 

DETAILED DESCRIPTION OF THE INVENTION 
Turning now to the drawings, and with particular attention to FIG. 1, a 
diagram illustrating an exemplary H.323 telecommunications system 100 
according to an embodiment of the present invention is shown. It is noted that, 
while described specifically in the context of voice packets, the present invention 
encompasses the use of any multimedia information, such as video, data, voice, 
or any combinations thereof. It is further noted that an exemplary H.323 system 
which may be adapted for use in conjunction with the teachings of the present 
invention is the Siemens HiNet™ RC 3000 system available from Siemens. It is 
noted that the term "endpoint" includes client terminals and gateways. 

In the below description, it should be recognized that the called and calling 
parties may be in domains managed by different gatekeepers, each of which 
utilizes the GDI of the present invention and thus provides for virtual private 
networks for multiples companies over a single physical network using, for 
example, H.323 protocols. In addition to being applicable to H.323 systems, the 
present invention may also be applicable to other Internet Protocol telephony 
architectures and protocols, such as the IETF Session Initiation Protocol (SIP), 
media gateway control protocols such as MGCP, or IETF Megaco, or the like. It 
is noted that in the below description, the term "gatekeeper" used for the H.323 
embodiment is also intended to cover similar administrative functions such as 
functions that are performed by a "call agent" in SIP embodiments or a 
"controller" in MGCP embodiments. 

In accordance with a specific embodiment, the telecommunications 
system 100 includes a local area network (LAN) or packet network 101. Coupled 
to the LAN 101 may be a variety of H.323 terminals 102a, 102b, a multi-point 
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control unit (MCU) 104, an H.323 gateway 106, an H.323 gatekeeper 108, a LAN 
server 112 and a plurality of other devices such as personal computers (not 
shown). The H.323 terminals 102a, 102b are in compliance with the H.323 
Recommendation. Thus, the H.323 terminals 102a, 102b support H.245 control 
5 signaling for negotiation of media channel usage, Q.931 (H. 225.0) for call 

signaling and call setup, H. 225.0 Registration, Adniission, and Status (RAS), and 
RTP/RTCP for sequencing audio and video packets. The H.323 terminals 102a, 
102b may further implement audio and video codecs, T.I 20 data conferencing 
protocols and MCU capabilities. Further details concerning the H.323 

10 Recommendation may be obtained from the International Telecommunications 
Union; the H.323 Recommendation is hereby incorporated by reference in its 
entirety as if fully set forth herein. The H.323 terminals 102a, 102b may belong 
to the same company or to different companies. 

Further, the H.323 endpoints 102a, 102b, 106 include H.323 control layers 

15 111a, 111b, 111c including communication domain identification units (also 
referred to as "communication domain control layers") 110a, 110b, 110c 
according to the present invention. The communication domain identification 
units 110a, 110b, 110c function to determine whether a called number is an 
extension of the same company or an extension of an external party in direct 

20 signaling mode, or the CD! units simply provide the GDI to the gatekeeper 108 
during a gatekeeper-routed mode. The gatekeeper 108 then resolves the 
address using the GDI and determines whether the called number is an internal 
extension. The gatekeeper 108 thus also is provided with a communication 
domain control unit 109 according to the present invention, as will be discussed 

25 in greater detail below. The communication domain identification units 110a, 
110b, 110c and the communication domain control unit 109 thus permit more 
than one user to be assigned the same extension, with address resolution being 
performed additionally on the GDI. That is, the GDI allows creation of "virtual 
domains" with a single gatekeeper, or creation of "virtual domains" across 

30 multiple gatekeepers. It is noted that, while described with regard specifically to 
call setup procedures, the communication domain identifier may be used by the 
system for other domain-related restrictions, such as billing or availability of 
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particular call or supplemental services. For example, the CD! may be used to 
restrict particular users to internal calls only, or to forbid access to other services. 
Thus, the figures are exemplary only. 

In^ccordance with a specific embodiment, FIG. 2 illustrates a logical 
diagram of an H.323 interface to the LAN 101. It is noted that, while illustrated in 
network layer format, typically, the communication domain control layer 1 10 is 
implemented in a state machine capable of implementing the H.323 protocol. 
The H.323 mterface includes a network terminal/device 102 including a 
communicarion domain control layer 110 according to the present invention and 
a packet network interface 13 that is coupled to the network terminal 102. As will 
be discusseol in greater detail below, the network terminal 102 utilizes the ITU-T 
H.323 Reconimendation protocol. The network interface 13 couples the network 
terminal 102 t* the LAN 101. The network can include packet-switched 
Transmission Control Protocol/Internet Protocol (TCP/IP) and Internet Packet 
Exchange (IPXJ^over Ethernet, Fast Ethernet and Token Ring networks. 

The H.323 terminal 102 is coupled to a video input/output (I/O) interface 
28, an audio I/O interface 212, a data equipment interface 40, and a system 
control user interface (SCUl) 20. The network terminal 102 further includes an 
H. 225.0 layer 24, an audio coder/decoder (codec) 14 and may include, a video 
codec 15, and a T.120 data interface layer 19. The audio I/O interface or card 
212, which may be part of the standard H.323 device, connects to the audio 
codec 14, such as a G.71 1 codec, for encoding and decoding audio signals. The 
audio codec 14 is coupled to the H. 225.0 layer 24. It encodes audio signals for 
transmission and decodes the received signals. Although the G.711 codec is the 
mandatory audio codec for an H.323 terminal, other audio codecs, such as 

G. 728, G.729, G. 723.1, G,722, and MPEG1 audio may also be used for 
encoding and decoding speech. G. 723.1 is a preferred codec because of its 
reasonably low bit rate, which enables preservation of link bandwidth, particularly 
in slower speed network connections. 

The video I/O interface or card 28, which may be part of the standard 

H. 323 device, connects to a video codec 15, such as an H. 261 codec for 
encoding and decoding video signals. The video codec 15 encodes video 
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signals for transmission and decodes the received signals. H.261 is the 
mandatory codec for H.323 terminals that support video, though other codecs 
such as H.263 may be supported. 

The system control user interface (SCUl) 20 provides signaling and flow 
5 control for proper operation of the H.323 terminal 102. In particular, call signaling 
and control are handled by the SCUl 20. A communication domain control layer 
110 according to the present invention forms part of an H.323 control layer 111 
that is coupled to the SCUl 20. The communication domain control layer 110 
functions to resolve whether a dialed extension is an internal number and also 

10 may provide it to a gatekeeper, as will be discussed in greater detail below. 

The control layer 111 also includes a Q.931 layer 16, an H. 225.0 RAS 
layer 17 and an H.245 layer 18. Thus, the SCUl 20 interfaces to the H.245 layer 
18 which is the media control protocol that allows capability exchange, opening 
and closing of logical channels, mode preference requests, flow control 

15 messages, and other miscellaneous commands and indications. The SCUl 20 
also interfaces to the Q,931 protocol 16, which defines the setup, teardown, and 
control of H.323 communication sessions. The SCUl 20 further interfaces to the 
H. 225.0 Registration, Admission and Status (RAS) protocol that defines how 
H.323 entities can access H.323 gatekeepers to perform, among other things, 

20 address translation, thereby allowing H.323 endpoints to locate other H.323 

endpoints via an H.323 gatekeeper. The H. 225.0 layer 24, which is derived from 
the Q.931 layer 16 is the protocol for establishing a connection among two or 
more terminals and also formats the transmitted video, audio, data, signaling, 
and control streams into messages for communication via the network interface 

25 13 (e.g., packet network 101). The H. 225.0 layer 24 also retrieves the received 
video, audio, data, signaling and control streams from messages that have been 
input from the network interface, routes the signaling and control information to 
the control layer 111 and routes media streams to the appropriate audio, video 
and data interfaces. 

30 Thus, an H.323 network may be configured to include several different 

devices. For example, the network may include a terminal for enabling a user 
connected to a LAN to communicate with another user on the LAN, a terminal for 



enabling a caller resident on the LAN to call a second party in the public switched 
network and/or a terminal for enabling an adapter to communicate through a 
wireless trunk, using a wireless telephone. The device may also implement 
supplementary services according to the H.450.X Recommendations. 

An exemplary gatekeeper 108 according to an embodiment of the 
invention is shown in FIG. 3. As is known, the H.323 gatekeeper 108 performs 
address translation from IP or IPX addresses (as defined in the H. 225.0 RAS 
Specification) as well as bandwidth management (also defined in the H. 225.0 
RAS Specification). The H.323 gatekeeper 108 is further used for call routing. 
The H.323 gatekeeper 108 thus includes a control processor 300, one or more 
memory units 304, and a network interface 302. The control processor 300 is 
programmed to implement GDI functionality 110 (FIG. 1).The memory unit 304 is 
used to store a database of GDI information 305. As will be described in greater 
detail below, when the H.323 gatekeeper 108 receives a call setup request in a 
gatekeeper-routed mode, it also receives a GDI. The gatekeeper 108 (and 
particularly, the control processor 300) accesses the GDI database 305 to 
determine whether the called party is local in performing address resolution. 
Moreover, the gatekeeper 108 may use the GDI for other domain-restricted 
functionality, such as domain-specific bandwidth allocation and the like. 

FIG. 4A illustrates signaling flow according to an embodiment of the 
invention in which direct signaling between two endpoints is employed. It is 
noted that while the signal paths are shown as direct connections, typically, 
signaling is conducted via the LAN 101 . In this example, the two endpoints are 
Glient A and Ghent B that include communication domain identification layers 
according to the present invention. However, in other examples, the two 
endpoints may be a client and a gateway, or two gateways. The user of endpoint 
Glient A initiates a call to the endpoint Glient B, for example, by dialing an 
extension. In response, the endpoint Glient A accesses a database (not shown) 
that identifies the called destination as having a same or different GDI and 
resolves the address of Glient B and may also ascertain whether other domain- 
restricted functions are available. Then, the endpoint Glient A sends an H. 225.0 
Setup message to the endpoint Glient B. According to the present invention, the 
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H. 225.0 Setup message also includes the GDI, which may be stored by the 
endpoint Client B for future use. The endpoint Client B then receives the H. 225.0 
Setup message and the CD!. The endpoint Client B accesses its own database 
(not shown) to determine whether the caller is within the same company and/or 
whether other domain-related restrictions apply. The endpoint Client B then uses 
this information to direct an H. 225.0 Call Connect message to the endpoint Client 
A. Next, having resolved each other's addresses, the client endpoints undertake 
an H.245 terminal capability exchange, a master-slave exchange, and finally, set 
up the media channel. 

FIG. 4B illustrates a similar alternative embodiment, again with clients as 
the two endpoints discussed. In particular, in the embodiment of FIG. 4B, the 
gatekeeper is informed of the connection between the endpoints, but the 
gatekeeper itself is not used for the call connect signaling. If the endpoint Client 
A wishes to execute a call to the endpoint Client B, then the Client A sends an 
AdmissionRequest (ARQ) message to the gatekeepr GK requesting that a call be 
made using the direct signaling mode. The gatekeeper GK responds with an 
AdmissionConfirm (ACF) message. Then, the endpoint Client A sends an 
H. 225.0 Setup message to the gatekeeper GK. The H. 225.0 Setup message 
includes the CDI according to the present invention. The gatekeeper GK then 
accesses its database 305 (FIG. 3) advising it of whether the call is to an internal 
extension and whether other domain-related restrictions apply. The gatekeeper 
GK then fonwards the H. 225.0 Setup message with CDI to the Client B. The 
endpoint Client B and the gatekeeper GK then exchange the ARQ/ACF 
messages. Next, the Client A and Client B undertake a direct exchange (not via 
the GK) of H.245 Call Connect messages. The endpoints then directly proceed 
with an H.245 terminal capability exchange, an H.245 master-slave exchange 
and finally open the media channel. 

The two embodiments using direct signaling to establish calls between 
endpoints, in these examples a Client A and a Client B, are illustrated in 
flowchart form in FIG. 5. In a step 420, the control layer 111a and particularly, 
the CDI layer 1 10a, determine whether a called party is within the same domain 
thereby performing a correct address resolution. For example, the CDI layer 



1 10a accesses a database correlating the extension with another party on the 
network. The GDI layer 1 10a may further correlate the CD! with other domain- 
related functionality. In a step 421, the control layer 1 1 la of Client A sends an 
ARQ message to the gatekeeper GK 1 requesting that a call to endpoint Client B 
be allowed using a direct call model. In a step 422, the gatekeeper GK 1 
responds with an ACF message to the endpoint Client A, which is received by 
the control layer 111a. The ACF message includes a Call Signaling Transport 
Channel Address of the endpoint Client B. In a step 423, in response to the ACF 
message, the control layer 111a sends an H. 225.0 Setup message directly to 
endpoint Client B including the Communication Domain Identification. In a step 
424, the endpoint Client B receives the H.225.0 setup message and begins to 
process the received H.225.0 Setup message by storing the CDI. In response to 
the setup message, in a step 425, the endpoint Client B's control layer 111 
conducts an ARQ/ACF exchange with the gatekeeper GK. Next, in a step 426, 
the endpoint Client B's control layer 111 sends an H.225.0 Connect message to 
the endpoint Client A's control layer to progress the call to a connect state. In a 
step 427, the endpoints Clients A and B exchange H.245 terminal capability 
messages. In a step 428, the endpoints Client A and Client B exchange H.245 
master-slave determination messages and any other needed H.245 messages. 
In a step 430, both endpoints Client A and Client B establish a media channel 
between them. 

In another embodiment, the exchange of ARQ/ACF messages may be 
omitted after step 420. That is, a direct call may be established between the 
control units 111a and 1 1 lb with no involvement of gatekeeper GK 1 . In this 
scenario, steps 421 , 422 and 425 are omitted. That is, after step 420, in a step 
423a, the control layer 1 10a sends an H.225.0 message directly to the endpoint 
Client B, including the Communication Domain Identifier. In a step 424a, the 
endpoint Client 2 receives the H.225.0 Setup message and the CDI and 
determines whether the call is from an in-domain caller. This causes endpoint 
Client B to process the received H.225.0 Setup message. Next, steps 426, 427, 
428 and 430 as described above are followed. 

Signal flow for an alternative embodiment of the invention, employing 
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gatekeeper-controlled call and control signaling is shown in FIG. 6. In particular, 
if the endpoint Client A wishes to set up a call to the endpoint Client B, the 
endpoint Client A sends an ARQ message to the gatekeeper GK. The 
gatekeeper GK responds with an ACF message. Next, the Client A sends an 
H.225 Setup message to the gatekeeper GK including the Communication 
Domain Identifier (CDI). The gatekeeper GK accesses its database for the CDI 
and forwards this message to the Client B. The Client B responds with an ARQ 
to the gatekeeper GK. The gatekeeper GK replies with an ACF to the Client B. 
Next, the endpoint Client A responds with an H.225 Alerting and Connect 
message. The gatekeeper GK forwards the Alerting and Connect message to 
the endpoint Client B. The Alerting and Connect message is used to set up the 
H.245 control channel, in this case, between the gatekeeper GK and the 
endpoints. Finally, the media channel is established, directly between the 
endpoints Client A and Client B. 

Operation of this embodiment of the invention is illustrated more clearly 
with reference to the flowchart of FIG. 7. In particular, in a step 402, the endpoint 
Client A wants to establish a call to another endpoint. Client B. The endpoint 
Client A and, particularly, the control unit 1 10a, sends an ARQ message 
(AdmissionRequest) to the gatekeeper GK. Assuming the gatekeeper GK is 
functioning, the gatekeeper GK responds with an ACF (AdmissionConfirm) 
message to Client A, in a step 404, which is received by the control unit 1 10a. 
The ACF message includes a Call Signaling Transport Channel Address of the 
gatekeeper GK. In a step 406, in response to the ACF message, the control unit 
1 10a sends an H. 225.0 Set-up message to the gatekeeper GK, including a 
Globally Unique Call Identifier to identify the call and the Communication Domain 
Identifier (CDI) of the endpoint Client A. It is noted that the CDI can be assigned 
either to the endpoint terminal itself or to the individual user, so that more than 
one user may use a single H.323 terminal. In a step 407, the gatekeeper GK, 
and in particular the control processor 300 accesses its CD! database 305 to 
determine whether the called party is within the same administrative domain and 
to resolve the address of the called party. Further, the CDI may be used for 
other domain-restricted functionality. In preferred embodiments, in order to 
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protect the network of false use of GDIs, only the administrator is able to 
associate and change the GDI for the user. 

In a step 408, having determined the address of the endpoint Glient B, the 
gatekeeper GK relays the H. 225.0 Setup message including the GDI to the 
endpoint Glient B and, in particular, its control unit 1 10b. In a step 409, the 
endpoint Glient B may store the GDI of the calling party endpoint Glient A. In a 
step 410, the endpoint Glient B's control unit 1 10b conducts an ARQ/AGF 
exchange with the gatekeeper GK. In a step 412, the endpoint Glient B's control 
unit 1 10c sends H. 225.0 Alerting and Gonnect messages to the gatekeeper GK 
as the call progresses to the connect state. The gatekeeper GK, in turn provides 
the Alerting and Gonnect messages to the endpoint Glient As control unit 1 10a 
in a step 414. The Alerting or Gonnect message includes the Gatekeeper H.245 
Gontrol Ghannel Transport Address, which is used, in a step 415, to establish the 
H.245 control channel. Next, an H.245 capability exchange is undertaken, in a 
step 416. In a step 417 the media channel is opened between endpoint Glient A 
and Glient B. 



